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CLAIMS : 

What is claimed is: 

5 1. A method in a data processing system for managing 
access to data in a keystore, the method comprising: 

receiving a request for access to an item of data 
from a requestor, wherein the item of data is encrypted 
using a key ; 

10 determining whether the requestor is a trusted 

requestor; 

responsive to a determination that the requestor is 
a trusted requestor, decrypting the item of data using 
the key to form a decrypted item of data; and 
15 sending the decrypted item of data to the requestor. 

2. The method of claim 1, wherein the requestor is an 
application. 

20 3. The method of claim 1, wherein the Keystore is a 
Java Keystore - 

4. The method of claim 1, wherein the item of data is 
another key. 

25 

5. The method of claim 1, wherein the item of data is a 
certificate . 
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6. The method of claim 1, wherein the item of data is 
indexed within the Keystore using an alias. 
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7. The method claim 6, wherein the request includes the 
alias further comprising: 

responsive to an absence of a determination that the 
requestor is a trusted requestor, returning a null result 
5 to the requestor. 

8. The method of claim 1 further comprising: 
responsive to receiving a request to add a new item 

of data to the Keystore, encrypting the new item of data 
10 to form an encrypted item of data; and 

storing the encrypted item of data in the Keystore. 

9. The method of claim 8 further comprising: 
storing the new item of data in the Keystore. 
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10. The method of claim 8, wherein each item of data in 
the Keystore is associated with an alias. 



ll 11. A method in a data processing system for managing 

=1 T 

Z) 20 access to data in a keystore, the method comprising: 

==■ receiving a request for access to an item of data 

from a requestor, wherein the item of data is encrypted 
using a key; 

determining whether the requestor is a trusted 
25 requestor; and 

responsive to a determination that the requestor is 
a trusted requestor, sending the key and the item of data 
to the requestor. 
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12. A Keystore system comprising: 
a Keystore object including: 
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a key; and 

a plurality of entries, wherein each entry within 
the plurality of entries is encrypted using the key; 
and 

a Keystore process, wherein the Keystore process 
provides access to the plurality of entries in response 
to a request from a trusted application by providing the 
key to the trusted application. 

13- The Keystore system of claim 12, wherein the 
plurality of entries is indexed using a plurality of 
aliases and wherein the request includes an alias for a 
requested entry, 

14. The Keystore system of claim 12, wherein the 
plurality of entries is a first plurality of entries and 
wherein the Keystore object includes a second plurality 
of entries corresponding to the first plurality of 
entries in an unencrypted form. 

15. A data processing system comprising: 
a bus system; 

a communications unit connected to the bus, wherein 
data is sent and received using the communications unit; 

a memory connected to the bus system, wherein a set 
of instructions are located in the memory; and 

a processor unit connected to the bus system, 
wherein the processor unit executes the set of 
instructions to receive a request for access to an item 
of data from a requestor, wherein the item of data is 
encrypted using a key, determine whether the requestor is 
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a trusted requestor, and send the key and the item of 
data to the requestor, in response to a determination 
that the requestor is a trusted requestor . 

16. The data processing system of claim 15, wherein the 
bus system includes a primary bus and a secondary bus. 

17. The data processing system of claim 15, wherein the 
processor unit includes a single processor. 

18. The data processing system of claim .15, wherein the 
processor unit includes a plurality of processors. 

19. The data processing system claim 15, wherein the 
communications unit is an Ethernet adapter. 

20. A data processing system for managing access to data 
in a datastore, the data processing system comprising: 

receiving means for receiving a request for access 
to an item of data from a requestor, wherein the item of 
data is encrypted using a key; 

determining means for determining whether the 
requestor is a trusted requestor; and 

decrypting means, responsive to a determination that 
the requestor is a trusted requestor, for decrypting the 
item of data using the key to form a decrypted item of 
data; and 

sending means for sending the decrypted item of data 
to the requestor. 



21. The data processing system of claim 20, wherein the 
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requestor is an application. 

22. The data processing system of claim 20, wherein the 
Keystore is a Java Keystore. 

23. The data processing system of claim 20, wherein the 
item of data is another key. 

24. The data processing system of claim 20, wherein the 
item of data is a certificate. 

25. The data processing system of claim 20, wherein the 
item of data is indexed within the Keystore using an 
alias . 

26. The data processing system claim 25, wherein the 
request includes the alias further comprising: 

returning means, responsive to an absence of a 
determination that the requestor is a trusted requestor, 
for returning a null result to the requestor. 

27. The data processing system of claim 20 further 
comprising : 

' encrypting means, responsive to receiving a request 
to add a new item of data to the Keystore, for encrypting 
the new item of data to form an encrypted item of data; 
and 

> storing means for storing the encrypted item of data 
in the Keystore . 



28. The data processing system of claim 27, wherein the 
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storing means is a first storing means further 
comprising : 

second storing means for storing the new item of 
data in the Keystore . 

29. The data processing system of" claim 27, wherein 
each item of data in the Keystore is associated with an 
alias . 



30. A data processing system for managing access to data 
in a datastore, the data processing system comprising: 

receiving means for receiving a request for access 
to an item of data from a requestor, wherein the item of 
data is encrypted using a key; 

determining means for determining whether the 
requestor is a trusted requestor; and 

sending means, responsive to a determination that 
the requestor is a trusted requestor, for sending the key 
and the item of data to the requestor. 

31. A computer program product in a computer readable 
medium for managing access to data in a datastore, the 
computer program product comprising: 

first instructions for receiving a request for 
access to an item of data from a requestor, wherein the 
item of data is encrypted using a key; 

second instructions for determining whether the 
requestor is a trusted requestor; and 

third instructions, responsive to a determination 
that the requestor is a trusted requestor, for sending 
the key and the item of data to the requestor. 
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32 . A computer program product in a computer readable 

medium for managing access to data in a datastore, the 

computer program product comprising: 

first instructions for receiving a request for 

access to an item of data from a requestor, wherein the 

item of data is encrypted using a key; 

second instructions for determining whether the 

requestor is a trusted requestors- 
third instruction, responsive to a determination 

that the requestor is a trusted requestor, for decrypting 

the item of data using the key to form a decrypted item 

of data; and 

fourth instructions for sending the decrypted item 
of data to the requestor. 



